@nextsparkjs/theme-default 0.1.0-beta.1

package/entities/customers/customers.types.ts

@@ -0,0 +1,83 @@
+/**
+ * Customers Service Types
+ *
+ * Type definitions for the CustomersService.
+ * Customers is a private entity (access.shared: true) - all authenticated
+ * users can access all records within their team context.
+ *
+ * @module CustomersTypes
+ */
+
+/**
+ * Day of week values for visit/contact days
+ */
+export type DayOfWeek = 'lun' | 'mar' | 'mie' | 'jue' | 'vie'
+
+/**
+ * Customer entity
+ */
+export interface Customer {
+  id: string
+  name: string
+  account: number
+  office: string
+  phone?: string
+  salesRep?: string
+  visitDays?: DayOfWeek[]
+  contactDays?: DayOfWeek[]
+  createdAt?: string
+  updatedAt?: string
+}
+
+/**
+ * Options for listing customers
+ */
+export interface CustomerListOptions {
+  limit?: number
+  offset?: number
+  orderBy?: 'name' | 'account' | 'office' | 'salesRep' | 'createdAt'
+  orderDir?: 'asc' | 'desc'
+}
+
+/**
+ * Result of listing customers with pagination
+ */
+export interface CustomerListResult {
+  customers: Customer[]
+  total: number
+}
+
+/**
+ * Search options
+ */
+export interface CustomerSearchOptions {
+  query: string
+  limit?: number
+}
+
+/**
+ * Data required to create a new customer
+ */
+export interface CustomerCreateData {
+  name: string
+  account: number
+  office: string
+  teamId: string
+  phone?: string
+  salesRep?: string
+  visitDays?: DayOfWeek[]
+  contactDays?: DayOfWeek[]
+}
+
+/**
+ * Data for updating an existing customer
+ */
+export interface CustomerUpdateData {
+  name?: string
+  account?: number
+  office?: string
+  phone?: string
+  salesRep?: string
+  visitDays?: DayOfWeek[]
+  contactDays?: DayOfWeek[]
+}

package/entities/customers/messages/en.json

@@ -0,0 +1,66 @@
+{
+  "entity": {
+    "name": "Customer",
+    "plural": "Customers",
+    "description": "Manage your customers and their information"
+  },
+  "fields": {
+    "office": {
+      "label": "Office",
+      "description": "Customer office or branch location",
+      "placeholder": "Enter office..."
+    },
+    "number": {
+      "label": "Customer Number",
+      "description": "Unique customer identifier",
+      "placeholder": "Enter customer number..."
+    },
+    "name": {
+      "label": "Name",
+      "description": "Customer name",
+      "placeholder": "Enter customer name..."
+    },
+    "phone": {
+      "label": "Phone",
+      "description": "Customer phone number",
+      "placeholder": "Enter phone number..."
+    },
+    "salesRep": {
+      "label": "Sales Representative",
+      "description": "Assigned sales representative",
+      "placeholder": "Enter sales rep..."
+    },
+    "visitDays": {
+      "label": "Visit Days",
+      "description": "Scheduled visit days",
+      "placeholder": "Enter visit days..."
+    },
+    "contactDays": {
+      "label": "Contact Days",
+      "description": "Preferred contact days",
+      "placeholder": "Enter contact days..."
+    },
+    "image": {
+      "label": "Image",
+      "description": "Customer logo or image URL",
+      "placeholder": "Enter image URL..."
+    }
+  },
+  "actions": {
+    "create": "Create Customer",
+    "edit": "Edit Customer",
+    "delete": "Delete Customer",
+    "view": "View Customer",
+    "list": "List Customers",
+    "search": "Search Customers",
+    "export": "Export Customers",
+    "import": "Import Customers"
+  },
+  "messages": {
+    "created": "Customer created successfully",
+    "updated": "Customer updated successfully",
+    "deleted": "Customer deleted successfully",
+    "notFound": "Customer not found",
+    "error": "An error occurred while processing the customer"
+  }
+}

package/entities/customers/messages/es.json

@@ -0,0 +1,66 @@
+{
+  "entity": {
+    "name": "Cliente",
+    "plural": "Clientes",
+    "description": "Gestiona tus clientes y su información"
+  },
+  "fields": {
+    "office": {
+      "label": "Oficina",
+      "description": "Oficina o sucursal del cliente",
+      "placeholder": "Ingrese oficina..."
+    },
+    "number": {
+      "label": "Número de Cliente",
+      "description": "Identificador único del cliente",
+      "placeholder": "Ingrese número de cliente..."
+    },
+    "name": {
+      "label": "Nombre",
+      "description": "Nombre del cliente",
+      "placeholder": "Ingrese nombre del cliente..."
+    },
+    "phone": {
+      "label": "Teléfono",
+      "description": "Número de teléfono del cliente",
+      "placeholder": "Ingrese número de teléfono..."
+    },
+    "salesRep": {
+      "label": "Representante de Ventas",
+      "description": "Representante de ventas asignado",
+      "placeholder": "Ingrese representante de ventas..."
+    },
+    "visitDays": {
+      "label": "Días de Visita",
+      "description": "Días programados de visita",
+      "placeholder": "Ingrese días de visita..."
+    },
+    "contactDays": {
+      "label": "Días de Contacto",
+      "description": "Días preferidos de contacto",
+      "placeholder": "Ingrese días de contacto..."
+    },
+    "image": {
+      "label": "Imagen",
+      "description": "Logo o URL de imagen del cliente",
+      "placeholder": "Ingrese URL de imagen..."
+    }
+  },
+  "actions": {
+    "create": "Crear Cliente",
+    "edit": "Editar Cliente",
+    "delete": "Eliminar Cliente",
+    "view": "Ver Cliente",
+    "list": "Listar Clientes",
+    "search": "Buscar Clientes",
+    "export": "Exportar Clientes",
+    "import": "Importar Clientes"
+  },
+  "messages": {
+    "created": "Cliente creado exitosamente",
+    "updated": "Cliente actualizado exitosamente",
+    "deleted": "Cliente eliminado exitosamente",
+    "notFound": "Cliente no encontrado",
+    "error": "Ocurrió un error al procesar el cliente"
+  }
+}

package/entities/customers/migrations/001_customers_table.sql

@@ -0,0 +1,102 @@
+-- Migration: 001_customers_table.sql
+-- Description: Customers (table, indexes, RLS)
+-- Date: 2025-01-24
+-- Updated: 2025-11-26 (Phase 2 - Team Isolation)
+
+-- ============================================
+-- TABLE
+-- ============================================
+DROP TABLE IF EXISTS public."customers" CASCADE;
+
+CREATE TABLE IF NOT EXISTS public."customers" (
+  -- Primary Key
+  id              TEXT PRIMARY KEY DEFAULT gen_random_uuid()::text,
+
+  -- Relational Fields (al inicio)
+  "userId"        TEXT NOT NULL REFERENCES public."users"(id) ON DELETE CASCADE,
+  "teamId"        TEXT NOT NULL REFERENCES public."teams"(id) ON DELETE CASCADE,
+
+  -- Entity-specific fields
+  office          TEXT NOT NULL,
+  account         INTEGER NOT NULL UNIQUE,
+  name            TEXT NOT NULL,
+  phone           TEXT,
+  "salesRep"      TEXT,
+  "visitDays"     JSONB DEFAULT '[]'::jsonb,
+  "contactDays"   JSONB DEFAULT '[]'::jsonb,
+
+  -- System fields
+  "createdAt"     TIMESTAMPTZ NOT NULL DEFAULT now(),
+  "updatedAt"     TIMESTAMPTZ NOT NULL DEFAULT now()
+);
+
+COMMENT ON TABLE  public."customers"                IS 'Customers table with team isolation via RLS';
+COMMENT ON COLUMN public."customers"."userId"       IS 'User who created this customer record';
+COMMENT ON COLUMN public."customers"."teamId"       IS 'Team context for isolation';
+COMMENT ON COLUMN public."customers".office         IS 'Customer office or branch';
+COMMENT ON COLUMN public."customers".account        IS 'Unique customer account number (used for identification and external integrations)';
+COMMENT ON COLUMN public."customers".name           IS 'Customer name or company name';
+COMMENT ON COLUMN public."customers".phone          IS 'Customer phone number';
+COMMENT ON COLUMN public."customers"."salesRep"     IS 'Sales representative assigned to customer';
+COMMENT ON COLUMN public."customers"."visitDays"    IS 'Days of the week for customer visits as JSONB array';
+COMMENT ON COLUMN public."customers"."contactDays"  IS 'Days of the week for customer contact as JSONB array';
+
+-- ============================================
+-- TRIGGER updatedAt (uses Better Auth function)
+-- ============================================
+DROP TRIGGER IF EXISTS customer_set_updated_at ON public."customers";
+CREATE TRIGGER customer_set_updated_at
+BEFORE UPDATE ON public."customers"
+FOR EACH ROW EXECUTE FUNCTION public.set_updated_at();
+
+-- ============================================
+-- INDEXES
+-- ============================================
+CREATE INDEX IF NOT EXISTS idx_customer_user_id          ON public."customers"("userId");
+CREATE INDEX IF NOT EXISTS idx_customer_team_id          ON public."customers"("teamId");
+CREATE INDEX IF NOT EXISTS idx_customer_office           ON public."customers"(office);
+CREATE INDEX IF NOT EXISTS idx_customer_account          ON public."customers"(account);
+CREATE INDEX IF NOT EXISTS idx_customer_name             ON public."customers"(name);
+CREATE INDEX IF NOT EXISTS idx_customer_sales_rep        ON public."customers"("salesRep");
+CREATE INDEX IF NOT EXISTS idx_customer_created_at       ON public."customers"("createdAt");
+CREATE INDEX IF NOT EXISTS idx_customer_team_created     ON public."customers"("teamId", "createdAt" DESC);
+
+-- JSONB indexes
+CREATE INDEX IF NOT EXISTS idx_customer_visit_days_gin   ON public."customers" USING GIN ("visitDays");
+CREATE INDEX IF NOT EXISTS idx_customer_contact_days_gin ON public."customers" USING GIN ("contactDays");
+
+-- ============================================
+-- RLS
+-- ============================================
+ALTER TABLE public."customers" ENABLE ROW LEVEL SECURITY;
+
+-- Cleanup existing policies
+DROP POLICY IF EXISTS "Users can view own customers"                       ON public."customers";
+DROP POLICY IF EXISTS "Users can create customers"                         ON public."customers";
+DROP POLICY IF EXISTS "Users can insert own customers"                     ON public."customers";
+DROP POLICY IF EXISTS "Users can update own customers"                     ON public."customers";
+DROP POLICY IF EXISTS "Users can delete own customers"                     ON public."customers";
+DROP POLICY IF EXISTS "Customers auth can do all"                          ON public."customers";
+DROP POLICY IF EXISTS "Customers team can do all"                          ON public."customers";
+
+-- ============================
+-- RLS: TEAM ISOLATION ONLY
+-- ============================
+-- IMPORTANTE: RLS solo verifica team membership
+-- La lógica de access.shared (user isolation) se maneja a NIVEL APP
+-- Esto permite cambiar el comportamiento desde el config sin modificar RLS
+CREATE POLICY "Customers team can do all"
+ON public."customers"
+FOR ALL TO authenticated
+USING (
+  -- Superadmin bypass
+  public.is_superadmin()
+  OR
+  -- Team isolation only: user must be member of the team
+  "teamId" = ANY(public.get_user_team_ids())
+)
+WITH CHECK (
+  public.is_superadmin()
+  OR
+  "teamId" = ANY(public.get_user_team_ids())
+);

package/entities/customers/migrations/002_customers_metas.sql

@@ -0,0 +1,92 @@
+-- Migration: 002_customers_metas.sql
+-- Description: Customers metas (table, indexes, RLS)
+-- Date: 2025-01-24
+-- Updated: 2025-11-26 (Phase 2 - Team Isolation via parent)
+
+-- ============================================
+-- TABLE
+-- ============================================
+-- No DROP needed - removed automatically by parent table CASCADE
+CREATE TABLE IF NOT EXISTS public."customers_metas" (
+  id             TEXT PRIMARY KEY DEFAULT gen_random_uuid()::text,
+  "entityId"     TEXT NOT NULL REFERENCES public."customers"(id) ON DELETE CASCADE,
+  "metaKey"      TEXT NOT NULL,
+  "metaValue"    JSONB NOT NULL DEFAULT '{}'::jsonb,
+  "dataType"     TEXT DEFAULT 'json',
+  "isPublic"     BOOLEAN NOT NULL DEFAULT false,
+  "isSearchable" BOOLEAN NOT NULL DEFAULT false,
+  "createdAt"    TIMESTAMPTZ NOT NULL DEFAULT now(),
+  "updatedAt"    TIMESTAMPTZ NOT NULL DEFAULT now(),
+  CONSTRAINT customers_metas_unique_key UNIQUE ("entityId", "metaKey")
+);
+
+COMMENT ON TABLE  public."customers_metas"                   IS 'Customers metadata table - stores additional key-value pairs for customers';
+COMMENT ON COLUMN public."customers_metas"."entityId"        IS 'Generic foreign key to parent customer entity';
+COMMENT ON COLUMN public."customers_metas"."metaKey"         IS 'Metadata key name';
+COMMENT ON COLUMN public."customers_metas"."metaValue"       IS 'Metadata value as JSONB';
+COMMENT ON COLUMN public."customers_metas"."dataType"        IS 'Type hint for the value: json, string, number, boolean';
+COMMENT ON COLUMN public."customers_metas"."isPublic"        IS 'Whether this metadata is publicly readable';
+COMMENT ON COLUMN public."customers_metas"."isSearchable"    IS 'Whether this metadata is searchable';
+
+-- ============================================
+-- TRIGGER updatedAt (uses Better Auth function)
+-- ============================================
+DROP TRIGGER IF EXISTS customers_metas_set_updated_at ON public."customers_metas";
+CREATE TRIGGER customers_metas_set_updated_at
+BEFORE UPDATE ON public."customers_metas"
+FOR EACH ROW EXECUTE FUNCTION public.set_updated_at();
+
+-- ============================================
+-- INDEXES
+-- ============================================
+CREATE INDEX IF NOT EXISTS idx_customers_metas_customer_id      ON public."customers_metas"("entityId");
+CREATE INDEX IF NOT EXISTS idx_customers_metas_key              ON public."customers_metas"("metaKey");
+CREATE INDEX IF NOT EXISTS idx_customers_metas_composite        ON public."customers_metas"("entityId", "metaKey", "isPublic");
+CREATE INDEX IF NOT EXISTS idx_customers_metas_is_public        ON public."customers_metas"("isPublic") WHERE "isPublic" = true;
+CREATE INDEX IF NOT EXISTS idx_customers_metas_is_searchable    ON public."customers_metas"("isSearchable") WHERE "isSearchable" = true;
+CREATE INDEX IF NOT EXISTS idx_customers_metas_searchable_key   ON public."customers_metas"("metaKey") WHERE "isSearchable" = true;
+CREATE INDEX IF NOT EXISTS idx_customers_metas_value_gin        ON public."customers_metas" USING GIN ("metaValue");
+CREATE INDEX IF NOT EXISTS idx_customers_metas_value_ops        ON public."customers_metas" USING GIN ("metaValue" jsonb_path_ops);
+
+-- ============================================
+-- RLS
+-- ============================================
+ALTER TABLE public."customers_metas" ENABLE ROW LEVEL SECURITY;
+
+-- Cleanup existing policies
+DROP POLICY IF EXISTS "Users can view own customer metas"              ON public."customers_metas";
+DROP POLICY IF EXISTS "Users can insert customer metas"                ON public."customers_metas";
+DROP POLICY IF EXISTS "Users can insert own customer metas"            ON public."customers_metas";
+DROP POLICY IF EXISTS "Users can update own customer metas"            ON public."customers_metas";
+DROP POLICY IF EXISTS "Users can delete own customer metas"            ON public."customers_metas";
+DROP POLICY IF EXISTS "Customer metas auth can do all"                 ON public."customers_metas";
+DROP POLICY IF EXISTS "Customer metas team can do all"                 ON public."customers_metas";
+
+-- ============================
+-- RLS: TEAM ISOLATION VIA PARENT
+-- ============================
+-- Hereda el aislamiento del parent customer via teamId
+-- La lógica de access.shared se maneja a NIVEL APP
+CREATE POLICY "Customer metas team can do all"
+ON public."customers_metas"
+FOR ALL TO authenticated
+USING (
+  -- Superadmin bypass
+  public.is_superadmin()
+  OR
+  -- Team isolation via parent customer
+  EXISTS (
+    SELECT 1 FROM public."customers" c
+    WHERE c.id = "entityId"
+      AND c."teamId" = ANY(public.get_user_team_ids())
+  )
+)
+WITH CHECK (
+  public.is_superadmin()
+  OR
+  EXISTS (
+    SELECT 1 FROM public."customers" c
+    WHERE c.id = "entityId"
+      AND c."teamId" = ANY(public.get_user_team_ids())
+  )
+);

package/entities/pages/messages/en.json

@@ -0,0 +1,41 @@
+{
+  "entity": {
+    "singular": "Page",
+    "plural": "Pages"
+  },
+  "fields": {
+    "title": {
+      "label": "Title",
+      "placeholder": "Enter page title...",
+      "description": "Page title displayed in browser and navigation"
+    },
+    "slug": {
+      "label": "Slug",
+      "placeholder": "page-slug",
+      "description": "URL-friendly identifier (e.g., 'about' for /about)"
+    },
+    "status": {
+      "label": "Status",
+      "description": "Publication status",
+      "options": {
+        "draft": "Draft",
+        "published": "Published",
+        "scheduled": "Scheduled",
+        "archived": "Archived"
+      }
+    }
+  },
+  "actions": {
+    "create": "Create Page",
+    "edit": "Edit Page",
+    "delete": "Delete Page",
+    "publish": "Publish",
+    "unpublish": "Unpublish"
+  },
+  "messages": {
+    "created": "Page created successfully",
+    "updated": "Page updated successfully",
+    "deleted": "Page deleted successfully",
+    "published": "Page published successfully"
+  }
+}

package/entities/pages/messages/es.json

@@ -0,0 +1,41 @@
+{
+  "entity": {
+    "singular": "Pagina",
+    "plural": "Paginas"
+  },
+  "fields": {
+    "title": {
+      "label": "Titulo",
+      "placeholder": "Ingresa el titulo de la pagina...",
+      "description": "Titulo de la pagina mostrado en el navegador y navegacion"
+    },
+    "slug": {
+      "label": "Slug",
+      "placeholder": "slug-pagina",
+      "description": "Identificador amigable para URL (ej: 'acerca' para /acerca)"
+    },
+    "status": {
+      "label": "Estado",
+      "description": "Estado de publicacion",
+      "options": {
+        "draft": "Borrador",
+        "published": "Publicado",
+        "scheduled": "Programado",
+        "archived": "Archivado"
+      }
+    }
+  },
+  "actions": {
+    "create": "Crear Pagina",
+    "edit": "Editar Pagina",
+    "delete": "Eliminar Pagina",
+    "publish": "Publicar",
+    "unpublish": "Despublicar"
+  },
+  "messages": {
+    "created": "Pagina creada exitosamente",
+    "updated": "Pagina actualizada exitosamente",
+    "deleted": "Pagina eliminada exitosamente",
+    "published": "Pagina publicada exitosamente"
+  }
+}

package/entities/pages/migrations/001_pages_table.sql

@@ -0,0 +1,112 @@
+-- Migration: 008_pages_table.sql
+-- Description: Create pages table for dynamic page builder system with blocks
+-- Date: 2025-01-21
+-- Updated: 2025-12-17 (Add userId, teamId system fields + team isolation RLS)
+
+-- ============================================
+-- TABLE: pages
+-- ============================================
+DROP TABLE IF EXISTS public.pages CASCADE;
+
+CREATE TABLE IF NOT EXISTS public.pages (
+  id              UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+
+  -- Relational Fields (at the beginning)
+  "userId"        TEXT NOT NULL REFERENCES public."users"(id) ON DELETE CASCADE,
+  "teamId"        TEXT NOT NULL REFERENCES public."teams"(id) ON DELETE CASCADE,
+
+  slug            VARCHAR(255) NOT NULL,
+  title           VARCHAR(255) NOT NULL,
+  blocks          JSONB NOT NULL DEFAULT '[]'::JSONB,
+  locale          VARCHAR(10) NOT NULL DEFAULT 'en',
+
+  -- SEO fields
+  "seoTitle"       VARCHAR(255),
+  "seoDescription" TEXT,
+  "seoKeywords"    TEXT,
+  "ogImage"        TEXT,
+  noindex          BOOLEAN DEFAULT FALSE,
+  nofollow         BOOLEAN DEFAULT FALSE,
+
+  -- Meta fields
+  published        BOOLEAN DEFAULT FALSE,
+  "authorId"       TEXT REFERENCES public."users"(id) ON DELETE SET NULL,
+  "createdAt"      TIMESTAMPTZ NOT NULL DEFAULT now(),
+  "updatedAt"      TIMESTAMPTZ NOT NULL DEFAULT now(),
+
+  -- Constraints
+  CONSTRAINT unique_slug_locale UNIQUE(slug, locale),
+  CONSTRAINT valid_slug CHECK (slug ~ '^[a-z0-9\-]+$'),
+  CONSTRAINT valid_locale CHECK (locale ~ '^[a-z]{2}(-[A-Z]{2})?$'),
+  CONSTRAINT slug_length CHECK (LENGTH(slug) >= 2 AND LENGTH(slug) <= 100),
+  CONSTRAINT title_not_empty CHECK (LENGTH(TRIM(title)) > 0)
+);
+
+-- ============================================
+-- COMMENTS
+-- ============================================
+COMMENT ON TABLE  public.pages                  IS 'Dynamic pages created via block editor system';
+COMMENT ON COLUMN public.pages."userId"         IS 'User who created this page';
+COMMENT ON COLUMN public.pages."teamId"         IS 'Team context for isolation';
+COMMENT ON COLUMN public.pages.blocks           IS 'Array of block instances with props (JSONB)';
+COMMENT ON COLUMN public.pages.slug             IS 'URL-friendly identifier (lowercase, hyphens only)';
+COMMENT ON COLUMN public.pages.locale           IS 'Language/locale code (e.g., en, es, en-US)';
+
+-- ============================================
+-- TRIGGER: updatedAt
+-- ============================================
+DROP TRIGGER IF EXISTS pages_set_updated_at ON public.pages;
+CREATE TRIGGER pages_set_updated_at
+BEFORE UPDATE ON public.pages
+FOR EACH ROW EXECUTE FUNCTION public.set_updated_at();
+
+-- ============================================
+-- INDEXES
+-- ============================================
+CREATE INDEX IF NOT EXISTS idx_pages_user_id            ON public.pages("userId");
+CREATE INDEX IF NOT EXISTS idx_pages_team_id            ON public.pages("teamId");
+CREATE INDEX IF NOT EXISTS idx_pages_slug               ON public.pages(slug);
+CREATE INDEX IF NOT EXISTS idx_pages_locale             ON public.pages(locale);
+CREATE INDEX IF NOT EXISTS idx_pages_published          ON public.pages(published);
+CREATE INDEX IF NOT EXISTS idx_pages_author             ON public.pages("authorId");
+CREATE INDEX IF NOT EXISTS idx_pages_created            ON public.pages("createdAt" DESC);
+CREATE INDEX IF NOT EXISTS idx_pages_slug_locale        ON public.pages(slug, locale);
+CREATE INDEX IF NOT EXISTS idx_pages_published_locale   ON public.pages(published, locale) WHERE published = TRUE;
+CREATE INDEX IF NOT EXISTS idx_pages_blocks_gin         ON public.pages USING GIN (blocks);
+CREATE INDEX IF NOT EXISTS idx_pages_team_created       ON public.pages("teamId", "createdAt" DESC);
+
+-- ============================================
+-- RLS
+-- ============================================
+ALTER TABLE public.pages ENABLE ROW LEVEL SECURITY;
+
+DROP POLICY IF EXISTS "pages public can select" ON public.pages;
+DROP POLICY IF EXISTS "pages auth can do all"   ON public.pages;
+DROP POLICY IF EXISTS "Pages team can do all"   ON public.pages;
+
+-- Public can read published pages
+CREATE POLICY "pages public can select"
+ON public.pages
+FOR SELECT TO anon
+USING (published = TRUE);
+
+-- ============================
+-- RLS: TEAM ISOLATION ONLY
+-- ============================
+-- IMPORTANT: RLS only verifies team membership
+-- access.shared logic (user isolation) is handled at APP LEVEL
+CREATE POLICY "Pages team can do all"
+ON public.pages
+FOR ALL TO authenticated
+USING (
+  -- Superadmin bypass
+  public.is_superadmin()
+  OR
+  -- Team isolation only: user must be member of the team
+  "teamId" = ANY(public.get_user_team_ids())
+)
+WITH CHECK (
+  public.is_superadmin()
+  OR
+  "teamId" = ANY(public.get_user_team_ids())
+);

package/entities/pages/migrations/002_pages_metas.sql

@@ -0,0 +1,56 @@
+-- Migration: 002_pages_metas.sql
+-- Description: Create pages_metas table for flexible key-value metadata storage
+-- Date: 2025-01-25
+
+-- Create pages_metas table
+CREATE TABLE IF NOT EXISTS "pages_metas" (
+  id TEXT PRIMARY KEY DEFAULT gen_random_uuid()::text,
+  "pageId" UUID NOT NULL REFERENCES public."pages"(id) ON DELETE CASCADE,
+  "metaKey" TEXT NOT NULL,
+  "metaValue" JSONB NOT NULL DEFAULT '{}'::jsonb,
+  "dataType" TEXT,
+  "isPublic" BOOLEAN NOT NULL DEFAULT FALSE,
+  "isSearchable" BOOLEAN NOT NULL DEFAULT FALSE,
+  "createdAt" TIMESTAMPTZ NOT NULL DEFAULT now(),
+  "updatedAt" TIMESTAMPTZ NOT NULL DEFAULT now(),
+  CONSTRAINT pages_metas_unique_key UNIQUE ("pageId", "metaKey")
+);
+
+-- Indices
+CREATE INDEX IF NOT EXISTS idx_pages_metas_page_id ON "pages_metas"("pageId");
+CREATE INDEX IF NOT EXISTS idx_pages_metas_key ON "pages_metas"("metaKey");
+CREATE INDEX IF NOT EXISTS idx_pages_metas_composite ON "pages_metas"("pageId", "metaKey", "isPublic");
+CREATE INDEX IF NOT EXISTS idx_pages_metas_searchable ON "pages_metas"("isSearchable") WHERE "isSearchable" = true;
+CREATE INDEX IF NOT EXISTS idx_pages_metas_public ON "pages_metas"("isPublic") WHERE "isPublic" = true;
+CREATE INDEX IF NOT EXISTS idx_pages_metas_value_gin ON "pages_metas" USING GIN ("metaValue");
+
+-- Trigger for updatedAt
+DROP TRIGGER IF EXISTS pages_metas_set_updated_at ON "pages_metas";
+CREATE TRIGGER pages_metas_set_updated_at
+BEFORE UPDATE ON "pages_metas"
+FOR EACH ROW EXECUTE FUNCTION public.set_updated_at();
+
+-- ============================================
+-- RLS POLICIES
+-- ============================================
+ALTER TABLE "pages_metas" ENABLE ROW LEVEL SECURITY;
+
+-- Public can read public metadata
+DROP POLICY IF EXISTS "pages_metas_public_select" ON "pages_metas";
+CREATE POLICY "pages_metas_public_select"
+ON "pages_metas" FOR SELECT TO anon
+USING ("isPublic" = TRUE);
+
+-- Authenticated users can manage all metadata
+DROP POLICY IF EXISTS "pages_metas_auth_all" ON "pages_metas";
+CREATE POLICY "pages_metas_auth_all"
+ON "pages_metas" FOR ALL TO authenticated
+USING (true)
+WITH CHECK (true);
+
+-- Comments
+COMMENT ON TABLE "pages_metas" IS 'Flexible key-value metadata storage for pages';
+COMMENT ON COLUMN "pages_metas"."pageId" IS 'Reference to the parent page';
+COMMENT ON COLUMN "pages_metas"."metaKey" IS 'Unique key identifier for the metadata';
+COMMENT ON COLUMN "pages_metas"."metaValue" IS 'JSONB value for flexible data storage';
+COMMENT ON COLUMN "pages_metas"."isPublic" IS 'If true, this metadata can be read by anyone';